i need help (SSL)

[mstfkhazaal]

in my local host websockets is working
when i upload to my vps server(centos) it is not work

   'pusher' => [
            'driver' => 'pusher',
            'key' => env('PUSHER_APP_KEY'),
            'secret' => env('PUSHER_APP_SECRET'),
            'app_id' => env('PUSHER_APP_ID'),
            'options' => [
                'cluster' => env('PUSHER_APP_CLUSTER'),
                'encrypted' => true,
                'host' => 'rdms.sawagroup.org',
                'port' => 8443,
                'scheme' => 'https',
                'curl_options' => [
                    CURLOPT_SSL_VERIFYHOST => 0,
                    CURLOPT_SSL_VERIFYPEER => 0,
                ]         
            ],
        ],

           'id' => env('PUSHER_APP_ID'),
            'name' => env('APP_NAME'),
            'key' => env('PUSHER_APP_KEY'),
            'secret' => env('PUSHER_APP_SECRET'),
            'path' => env('PUSHER_APP_PATH'),
            'capacity' => null,
            'enable_client_messages' => true,
            'enable_statistics' => true,
            'encrypted' => true,

            window.Pusher = require('pusher-js')
            window.Echo = new Echo({
              broadcaster: 'pusher',
              key: process.env.MIX_PUSHER_APP_KEY,
              cluster: process.env.MIX_PUSHER_APP_CLUSTER,
              encrypted: true,
              wsHost: window.location.hostname,
              wsPort: 8443,
              wssPort: 8443,
              forceTLS: true,
              disableStats: false,
              enabledTransports: ['ws', 'wss'],
              authorizer: channel => ({
                authorize: (socketId, callback) => {
                  axios.post('/api/broadcasting/auth', {
                    socket_id: socketId,
                    channel_name: channel.name,
                  })
                    .then(response => {
                      callback(false, response.data)
                    })
                    .catch(error => {
                      callback(true, error)
                    })
                },
              }),
            })

i read documentation but i don't understand how can get pem files

[anditsung]

check you web configuration where the cert is locate at

[SaedyMoz]

use ssl in client side(java script). disable ssl in server side ( laravel-websockets config). if you use nginx proxy-pass ssl to localhost http :

location /app {
proxy_pass http://127.0.0.1:6010;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;

	proxy_set_header X-Forwarded-For    $proxy_add_x_forwarded_for;
	proxy_set_header X-Forwarded-Proto  https;
	proxy_set_header X-VerifiedViaNginx yes;
	proxy_read_timeout                  60;
	proxy_connect_timeout               60;
	proxy_redirect                      off;

	# Specific for websockets: force the use of HTTP/1.1 and set the Upgrade header
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection 'upgrade';
	proxy_set_header Host $host;
	proxy_cache_bypass $http_upgrade;
}

[neoacevedo]

use ssl in client side(java script). disable ssl in server side ( laravel-websockets config). if you use nginx proxy-pass ssl to localhost http :

But using SSL in JS and disabling HTTPS over server isn't a security bug?